SonicWall TZ 300W
cpe:2.3:h:sonicwall:tz_300w:*:*:*:*:*:*:*, +2 more
- <= 6.5.5.1-6n
A post-authentication stack-based buffer overflow vulnerability has been identified in SonicWall SonicOS. This vulnerability allows remote attackers to crash the firewall. It affects several Gen6 and Gen7 hardware firewalls, as well as Gen7 NSv and Gen8 firewalls, on various platforms and versions.
Exploitation of this vulnerability leads to a stack-based buffer overflow, causing the firewall to crash.
Administrators are advised to upgrade to SonicOS versions 6.5.5.2-28n, 7.3.2-7010, or 8.2.0-8009, depending on their firewall generation. Until these patches can be applied, it is recommended to disable HTTP/HTTPS-based firewall management and SSL-VPN access on all interfaces, restricting management access to SSH only.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.